Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File:                     s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier:          yr6I4bwf1aJXZnqIBNRMMXd+dVGxs8nVSPPmiII4eiM=
Subject key identifier:   F6:AD:96:77:5F:4C:BB:22:B8:90:A1:74:17:70:31:FA:CB:00:B6:56
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer:       /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial:       019F9248B87A02D7C501477BFEA600C3926C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number:          0A39
Signing time:             Fri 24 Jul 2026 04:01:07 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:07 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:07 +0000
Files and hashes:         1: BP8ohZBcj6NcqBRjGc25QgNrnnI.roa (hash: 395UmkLig0TCCb9njfR7+pVbNAtUDBDAYXAZ0wdHK9o=)
                          2: ew71Dr2hxhH6I9_RZhH0lsluIig.roa (hash: 0cm9urifI/2Uh0AOprLssITUSaMSxFAaeqTRzg9iNI0=)
                          3: jCJ22Fdf8SnbI8DcZqU35nF2Zew.roa (hash: JVckqbft6dBMO2AzO5LhlxSJUFnZrQ2XDuU3MVU82uA=)
                          4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: /QEHsSR2bpSURLde8FlOZbAmC5zm3Hew6i+Uyu+tebc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:b8:7a:02:d7:c5:01:47:7b:fe:a6:00:c3:92:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
        Validity
            Not Before: Jul 24 04:01:07 2026 GMT
            Not After : Jul 25 04:01:07 2026 GMT
        Subject: CN=f6ad96775f4cbb22b890a174177031facb00b656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:01:20:ea:8f:97:7f:47:4e:e8:86:c1:75:3e:
                    c0:12:f5:22:50:32:31:9a:ab:8e:0d:4c:f7:79:ca:
                    ab:42:b9:c3:21:05:b9:63:b7:84:2c:bd:ab:95:14:
                    df:d7:78:f7:6e:14:dd:c1:45:20:c9:84:55:3a:1e:
                    e4:1e:30:e4:9d:16:55:6b:8a:04:fe:de:c9:c1:f6:
                    2a:0b:a5:5f:94:f1:91:f9:f4:9b:1c:9f:27:f0:85:
                    87:e2:ee:61:9e:61:f6:6c:85:38:93:92:2d:0c:f7:
                    77:76:c1:98:1a:60:2f:01:98:84:10:53:d5:8e:28:
                    22:e7:9b:35:8f:ca:94:36:4e:4d:28:91:db:ce:16:
                    12:8e:a5:f1:aa:9f:ab:d5:56:ca:7d:42:ae:97:3f:
                    9c:1a:85:fc:bd:ab:38:6a:10:15:43:e2:b2:72:cd:
                    04:f6:fb:35:06:93:1f:14:83:a1:76:0d:f0:e3:03:
                    ff:75:8e:05:d8:47:78:5c:0d:6c:40:5f:f9:b5:8a:
                    43:0a:ce:ed:9c:3a:6e:52:c3:af:76:0e:1f:d6:7d:
                    72:26:2b:3b:c1:30:60:aa:2e:e8:a7:15:30:96:c1:
                    e6:b1:d0:53:36:c0:4a:61:20:91:36:4d:df:e7:42:
                    91:a9:f5:5f:59:d7:ee:c4:a7:1b:e0:94:90:02:ea:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AD:96:77:5F:4C:BB:22:B8:90:A1:74:17:70:31:FA:CB:00:B6:56
            X509v3 Authority Key Identifier:
                keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:50:54:58:3e:30:e2:1e:7c:10:72:10:ef:3b:6e:82:4b:4a:
         e0:97:aa:55:9b:55:d7:fd:e9:c3:9b:10:1e:a9:64:45:5b:7e:
         26:48:8c:d1:50:bb:e7:02:b7:15:a4:9c:ec:f9:a3:6b:f7:cb:
         bb:74:1e:af:c8:98:2f:8f:3a:a4:a3:4c:2e:02:48:a6:7a:90:
         6f:50:83:c4:19:a2:91:9d:05:e8:a7:ab:99:f2:83:93:bf:b3:
         b9:61:85:58:99:c4:5a:68:80:66:6f:25:8e:dd:37:d5:c6:1a:
         44:77:de:19:27:61:58:30:ea:37:4f:8e:fa:bd:bf:82:af:74:
         3f:c1:0e:b9:e6:b5:d7:de:84:76:d6:9e:fa:1a:e5:46:5e:6c:
         b2:0b:7f:59:e9:45:8a:7a:0a:63:c3:f9:85:bb:1f:56:12:8c:
         1a:b0:45:a5:99:46:88:54:a7:31:3c:78:3d:d3:ff:f6:88:3f:
         0e:6c:33:30:83:d0:b5:a8:bf:85:22:38:20:5b:08:14:be:f5:
         ae:a5:6b:49:28:0a:6d:91:54:65:22:7b:15:6e:89:d4:f0:95:
         9a:94:9f:04:e8:ca:5f:25:19:d8:cf:c0:f2:fd:22:d9:c2:f6:
         59:44:22:63:f7:03:d7:0c:38:b0:87:4f:27:6f:0f:80:2a:68:
         57:d8:b8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:04:39 2026 by rpki-client